Company says it is reviewing 50 petabytes of data after its agents accessed websites including Medicare without authorisation